Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/CexVUvbi5SFq6M2RNnWo-CvHDIM.roa
File: CexVUvbi5SFq6M2RNnWo-CvHDIM.roa (raw, json)
Hash identifier: BfNCf463X4m/8oM1ALm8FZMBfEaoHmKEe/pwIe95Sjo=
Subject key identifier: 09:EC:55:52:F6:E2:E5:21:6A:E8:CD:91:36:75:A8:F8:2B:C7:0C:83
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01966CAF0060C78BD041CE36A4EC44E31CA4
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/CexVUvbi5SFq6M2RNnWo-CvHDIM.roa
Signing time: Fri 25 Apr 2025 11:22:10 +0000
ROA not before: Fri 25 Apr 2025 11:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 45.134.156.0/22 maxlen: 24
45.134.158.0/24 maxlen: 24
45.134.159.0/24 maxlen: 24
78.136.248.0/22 maxlen: 24
185.232.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 11:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:af:00:60:c7:8b:d0:41:ce:36:a4:ec:44:e3:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Apr 25 11:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ec5552f6e2e5216ae8cd913675a8f82bc70c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:65:31:ef:0c:04:8f:31:48:77:71:c6:64:
61:f0:ac:ef:c2:34:64:5a:be:10:14:6d:f9:48:f4:
a1:20:f4:03:9d:33:6c:e1:87:1c:25:c2:c8:0f:0a:
1d:5f:fb:03:08:14:32:ca:d8:7f:5e:a8:47:cf:1d:
3b:0f:f2:60:d5:ad:cd:23:98:67:28:f3:4a:96:05:
7d:ee:d4:3b:ff:3c:ed:11:fc:2a:e8:01:b8:30:57:
8a:db:1b:e0:5e:31:e6:08:1b:fd:f4:10:90:f9:cd:
8a:af:6f:85:5d:eb:81:9c:36:63:bc:46:b1:2c:b8:
41:ef:a4:30:1b:26:c4:47:93:36:e6:e1:cf:2f:89:
b9:b3:4b:ef:f1:24:79:3b:8a:4c:28:f6:47:88:12:
3f:07:7f:29:f5:bb:6f:ac:bc:12:fe:10:8a:16:83:
8c:e6:45:28:a8:20:e4:0f:ca:f1:eb:07:18:74:d6:
1b:f2:4c:0b:b6:20:bc:cf:8c:a1:b8:b8:be:8c:1f:
37:00:5e:b2:c8:df:ce:92:20:59:f2:38:e0:62:3b:
6c:7d:74:61:10:94:cf:eb:d4:c2:74:fd:4b:d7:b1:
6f:d8:53:b2:58:c6:7d:e1:c5:02:74:08:d4:79:a4:
43:2b:35:6f:a1:8b:13:83:3b:1d:ed:90:aa:04:54:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:55:52:F6:E2:E5:21:6A:E8:CD:91:36:75:A8:F8:2B:C7:0C:83
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/CexVUvbi5SFq6M2RNnWo-CvHDIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.156.0/22
78.136.248.0/22
185.232.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:35:9b:1b:2b:24:aa:f3:a5:d1:90:0f:60:0f:7c:87:42:79:
39:51:84:cd:71:b0:cb:06:d0:4f:f8:a0:67:f7:58:80:61:36:
2c:7c:6b:9c:7f:d6:04:95:ba:e7:02:3a:be:8f:5f:55:57:7b:
9c:ea:d7:1f:39:e3:de:eb:8c:07:88:ea:e2:89:f1:b9:25:21:
a0:d6:53:7a:dd:3e:6e:e4:99:4e:18:a8:d2:76:fc:b8:b4:f8:
fe:ae:f3:40:eb:56:c4:ee:bd:f7:51:75:6c:80:de:20:48:e1:
5e:64:7d:73:90:53:dc:82:be:88:d1:67:aa:f9:b6:fb:b1:85:
5b:ac:d4:a7:04:f4:85:68:53:2c:d0:57:ba:08:2e:16:91:d0:
a2:ec:c4:1a:4d:4a:34:c1:d6:58:fa:30:c2:e3:d2:87:70:e3:
72:8e:7a:78:9c:b4:4f:01:29:b3:2e:90:32:c1:7d:39:01:b0:
36:cb:2c:08:16:5c:ba:34:b0:91:41:a1:90:76:00:fb:dd:18:
14:9b:dd:50:9e:d1:d8:ac:58:fe:b3:cf:28:ec:f2:b5:81:2a:
f4:ff:ac:f5:95:ed:6c:ff:9f:33:17:01:d3:da:04:c6:9d:b9:
1b:25:99:0c:09:ab:09:98:76:ef:9c:10:cb:12:65:22:48:ce:
b6:fe:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:01:44 2025 by rpki-client